password_hash(); we never store or see your plain-text password)CF-Connecting-IP or X-Forwarded-For headers we receive from CloudflareThe site loads Google Analytics (measurement ID G-R0XWXLXCF2). Google may collect standard analytics signals including page views, approximate location derived from IP, device type, and browser. See Google's privacy policy for the full scope of what Google collects.
The site uses Google Fonts (Outfit and Fira Code) loaded from Google's servers. Loading a font from Google exposes your IP address to Google.
EasyShifts uses your browser's localStorage to remember preferences and to cache data so the app feels fast. This information lives on your device — it isn't transmitted to us beyond what's already described above. Items we store locally include your theme preference, display name, role cache, draft messages, and similar UI state.
Account and activity data are used solely to operate EasyShifts for you and your team: to keep you signed in, route messages to the right channels, render your schedule, record clock events, and enable workplace administrators to manage their team. Billing data is used only to manage your subscription with Stripe — to confirm whether your account has access, to send renewal-related emails, and to surface your current plan status in Settings.
We do not sell your data, rent it, share it with advertising networks, or use any of it to train AI or machine-learning models.
We keep your account and activity data for as long as your workspace remains active. If your workspace is cancelled, your data is retained for 30 days in case you reactivate, and then purged. You can ask your workspace administrator to remove your individual account at any time; archived users have their personal information (name, email, phone) cleared but anonymized historical schedule and clock records may be retained for payroll and audit purposes.
Traffic to EasyShifts is served over HTTPS with strict transport security. Passwords are hashed (never stored in plaintext). The site sits behind Cloudflare for DDoS protection and runs on a hardened server. Cookies are HttpOnly, Secure, and SameSite=Lax. Per-tenant data is stored in isolated SQLite databases, not a shared multi-tenant table.
Other than these services, your data isn't sent to any third party.
If you live in Canada, the EU, the UK, or California, applicable privacy law gives you specific rights over your personal data — including the right to access it, correct it, delete it, port it, and object to its processing. EasyShifts honours these rights regardless of where you live. Contact your workspace administrator to exercise any of them. Where your administrator is unable or unwilling to help, contact us directly.
EasyShifts is a workplace tool and isn't directed to children under 13. We don't knowingly collect personal information from anyone under 13. If you believe a child has registered for an account, contact your workspace administrator and the account will be removed.
EasyShifts is actively under development, and this policy may change as features are added or removed. When it does, the "Last updated" date at the top of this page will be revised. Substantive changes will be reflected in a clearly noted update.
Questions about this policy, requests to access or delete your data, or other privacy concerns should go to whoever administers EasyShifts at your workplace. For questions about terms of use, billing, refunds, or cancellation, see our Service Agreement or contact us directly.